Network Engineer L-3

Coretek is seeking a Network Engineer – L3 to design, implement, support, and continuously improve enterprise network and network security environments across Azure, hybrid, and on-premises data centers for managed services clients. This role owns complex routing, switching, firewall, SD-WAN, and cloud connectivity solutions, translating business, security, and compliance requirements into resilient, secure, and supportable network architectures.

The ideal candidate combines deep hands-on experience with Palo Alto and Fortinet firewalls, Azure networking, and enterprise LAN/WAN with strong troubleshooting discipline and client-facing communication. The engineer serves as the senior escalation point for network incidents, leads root cause analysis, reduces recurring issues, and drives standards, automation, and continuous improvement across the managed network estate.

Key Responsibilities

Azure & Hybrid Cloud Networking

• Design, deploy, and support Azure network architectures including hub-and-spoke, Virtual WAN, VNets, peering, UDRs, NSGs, and Private Endpoints/Private DNS.
• Implement and troubleshoot hybrid connectivity using site-to-site VPN, point-to-site VPN, and ExpressRoute.
• Configure and support Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Front Door, and DNS services.
• Align network designs to Cloud Adoption Framework landing zone connectivity guidance and Well-Architected principles.
• Maintain network diagrams, IP address plans, architecture decisions, and configuration standards.

Network Security & Firewalls

• Design, deploy, and manage Palo Alto (PAN-OS, Panorama, VM-Series) and Fortinet (FortiGate, FortiManager) firewalls on-premises and in Azure.
• Build and maintain security policies, NAT, IPsec tunnels, GlobalProtect/remote access VPN, URL filtering, and threat prevention profiles.
• Apply Zero Trust and network segmentation principles across cloud and data center environments.
• Perform firewall rule reviews, policy cleanup, and security posture assessments, and create prioritized remediation plans.
• Coordinate with security operations teams on threat investigations, vulnerability remediation, and compliance requirements.

Enterprise LAN/WAN & Data Center

• Support and optimize routing and switching environments, including BGP, OSPF, VLANs, STP, and Layer 2/Layer 3 designs.
• Manage SD-WAN, wireless, load balancing, and data center network infrastructure.
• Plan and execute network upgrades, migrations, firmware/OS lifecycle management, and data center-to-cloud transitions.
• Validate capacity, redundancy, and failover designs to meet availability commitments.

Managed Services Support, Escalation & Reliability

• Provide L3 escalation support for complex network, firewall, connectivity, and performance issues across multiple clients.
• Lead technical triage, packet capture and traffic analysis, service restoration, and coordination with ISPs, vendors, and client teams.
• Perform root cause analysis, document corrective actions, and eliminate recurring incidents through engineering improvements.
• Improve network monitoring, alert quality, runbooks, and change and maintenance procedures.
• Participate in an escalation/on-call rotation and provide clear, timely status communications during major incidents.

Automation & Operational Excellence

• Automate network deployment and configuration tasks using Terraform, Bicep, Ansible, PowerShell, or Python.
• Develop and enforce network standards, templates, and configuration baselines across client environments.
• Review incident, ticket, and capacity trends to identify proactive improvements.
• Track remediation completion, risk reduction, and service stability outcomes.

Client Advisory & Technical Leadership

• Serve as a trusted network advisor and escalation point for managed services clients.
• Lead network design reviews, technical discovery, and recommendation readouts.
• Mentor Systems Engineers and service desk staff and build reusable troubleshooting guidance and knowledge articles.
• Collaborate with Azure, security, EUC, service delivery, and account teams; support presales discovery and client onboarding into managed services.

Requirements

• 5+ years of enterprise network engineering experience, including 4+ years as a Cloud Network Engineer supporting multiple clients and systems.
• Hands-on experience designing and supporting Azure networking and hybrid connectivity in production e…